Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
File:                     323830343a336430303a3a2f33322d3438203d3e20323636323437.roa (raw, json)
Hash identifier:          O78LHEySCk31zZi57OLY8mVBvgZduDGK3F160DDWdF4=
Subject key identifier:   F1:90:46:89:BD:A0:EB:28:8A:F4:8A:86:B8:3C:52:31:1F:E5:AC:56
Certificate issuer:       /CN=8E331542F26E8ACE17780970AAEDCF44AAF5903A
Certificate serial:       5C2461DDC11B0D8C307DC1C52C6E0A77D82411D0
Authority key identifier: 8E:33:15:42:F2:6E:8A:CE:17:78:09:70:AA:ED:CF:44:AA:F5:90:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E331542F26E8ACE17780970AAEDCF44AAF5903A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
Signing time:             Mon 14 Sep 2026 11:59:22 +0000
ROA not before:           Mon 14 Sep 2026 11:54:22 +0000
ROA not after:            Mon 13 Sep 2027 11:59:22 +0000
asID:                     266247
IP address blocks:        2804:3d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/8E331542F26E8ACE17780970AAEDCF44AAF5903A.crl
                          rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/8E331542F26E8ACE17780970AAEDCF44AAF5903A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E331542F26E8ACE17780970AAEDCF44AAF5903A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:24:61:dd:c1:1b:0d:8c:30:7d:c1:c5:2c:6e:0a:77:d8:24:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E331542F26E8ACE17780970AAEDCF44AAF5903A
        Validity
            Not Before: Sep 14 11:54:22 2026 GMT
            Not After : Sep 13 11:59:22 2027 GMT
        Subject: CN=F1904689BDA0EB288AF48A86B83C52311FE5AC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:b8:1d:94:22:8b:c4:ab:9b:98:ba:a8:86:
                    2f:31:01:ea:f7:54:f8:09:29:1e:44:32:25:7d:d9:
                    a4:f4:c4:07:b4:8e:ac:fd:cc:c0:e7:44:e6:64:74:
                    f9:cd:d2:1a:6a:c5:3b:27:8a:43:03:06:ec:7a:d5:
                    37:9b:a0:4d:d7:00:a2:36:e6:69:32:c2:cb:7c:91:
                    68:ec:db:87:ee:05:f7:1c:31:c1:ea:16:ef:66:f4:
                    10:7c:77:ab:38:16:fe:0f:2b:a8:5e:0c:ba:8b:f8:
                    c9:6a:ad:78:ae:6e:0e:b9:ba:d5:e9:1c:76:80:3d:
                    04:7f:7e:71:2b:2c:3d:42:69:19:d6:2a:e5:33:51:
                    b7:bf:32:8e:a2:64:42:19:1a:19:37:2e:4a:aa:33:
                    69:cf:4e:0f:1c:66:66:c4:98:1e:b6:ff:19:ee:5f:
                    8e:7e:e8:78:a3:06:7b:85:2f:8d:36:b8:3a:3d:48:
                    50:ea:cb:7b:9d:a3:e3:d1:c2:b5:c1:f7:8a:25:67:
                    d7:b2:cb:97:39:91:92:2b:68:87:fd:a5:61:88:6c:
                    81:3d:80:d0:0b:2c:0d:20:05:12:d2:2d:cc:9c:55:
                    d2:5a:26:49:db:0e:b7:86:7b:ad:53:66:ab:a0:54:
                    ed:e0:05:8c:cc:95:59:f0:a7:dc:0c:a1:b2:1c:1c:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:46:89:BD:A0:EB:28:8A:F4:8A:86:B8:3C:52:31:1F:E5:AC:56
            X509v3 Authority Key Identifier:
                keyid:8E:33:15:42:F2:6E:8A:CE:17:78:09:70:AA:ED:CF:44:AA:F5:90:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/8E331542F26E8ACE17780970AAEDCF44AAF5903A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E331542F26E8ACE17780970AAEDCF44AAF5903A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:38:9f:ed:a2:4b:bd:0d:d3:23:46:49:21:09:2c:23:d5:
         5e:b6:3d:32:8e:21:22:4d:43:d8:7c:92:c2:82:38:9a:d9:52:
         40:af:f1:fc:8c:14:27:94:e7:a3:b7:c1:94:bf:43:ab:c2:ed:
         00:89:cb:ff:84:c5:29:73:65:59:b5:a4:65:70:00:b8:f5:68:
         02:d6:8d:13:26:d0:a6:aa:62:3c:87:87:d7:be:e8:15:fe:01:
         4a:5b:fe:01:50:cc:85:0f:b8:52:2b:27:52:61:b9:70:bf:64:
         64:50:f6:09:c3:5b:8c:75:f4:59:71:a3:3b:de:9d:9b:97:c9:
         b9:67:58:b3:06:a8:0e:54:82:41:10:b4:f5:a5:be:7d:68:71:
         f5:54:c7:00:c4:01:41:0f:42:26:6c:61:3a:ba:d8:c4:56:3b:
         72:6b:3b:2f:8a:70:da:b4:9e:a3:1c:ca:2c:ae:1c:ad:b5:58:
         cf:d1:d3:5a:d2:34:a7:a7:9a:1e:90:95:80:e8:78:74:2e:58:
         61:bd:de:36:d2:95:41:4b:9e:bd:52:f1:f0:1b:6d:57:d6:2b:
         0b:8f:fa:77:0a:8a:79:22:70:26:5d:51:c0:a8:fe:83:c1:db:
         e6:40:a8:23:2f:65:52:5f:45:3d:8c:16:c1:68:26:b3:2b:72:
         7d:49:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:02:05 2026 by rpki-client